Understand Prisma Access Agent user session timeouts and how to extend your user
session.
Where Can I Use This?
What Do I Need?
Prisma Access Agent
Minimum Prisma Access Agent version: 25.1.14
macOS 14 and later or Windows 10 version 2024 and later
desktop devices
Internet access
Prisma Access Agent user sessions are created when you connect to a Prisma Access location and authenticates successfully. Your user session will expire after a
certain period of time, or the session will log out automatically after a period of user
inactivity. When that happens, you will have to reauthenticate with Prisma Access Agent.
Your administrator sets the session timeout period as well as when you will be notified
of the impending expiration. Once logged in to Prisma Access Agent, you will stay logged
in until the session duration is reached, anywhere between 1-30 days. The agent will
notify you between 0-120 minutes before the session expires, depending on how your
administrator configured the agent.
Similarly, once logged in to Prisma Access Agent, you will stay logged in until the agent
detects no user activity for a certain amount of time (between 5 seconds to 720
minutes). The agent will notify you between 0-60 minutes before the session logs out
automatically due to inactivity, depending on the configuration by your
administrator.
Extend the User Session
When you're notified of an impending session timeout, you have the option to extend
your Prisma Access Agent user session. If you don’t extend the session, it
will expire at the time shown on the notification, and you will have to log in to
the agent again to continue your session.
The follow is a general workflow for extending a user session:
When a Prisma Access Agent user session is about to expire or log out
due to inactivity, a system notification will appear. For example:
When you click the system notification, the agent all will also display a
notification in the main window of the Prisma Access Agent app and prompt
you to click the banner to extend your session.
When you click the banner to extend the session, if your login credentials
for your organization are still active, the agent session will continue
without further action from you.
If your credentials have expired, you will need to reenter your login
credentials to renew your Prisma Access Agent session.
After successful authentication, you will be connected to the Prisma Access Agent.
Other Notification Scenarios
The following scenarios apply if you don’t respond to the initial system
notification.
You missed the system notification or if there is no system notification (for
example, if desktop notifications are not enabled on your device).
The Prisma Access Agent app will open, showing the notification banner
at the bottom of the window. You can click on the banner to extend your
session.
You take no action on the system notification or the Prisma Access Agent app.
Five minutes before session expiration, the notification banner will change
to an orange color in the Prisma Access Agent app.
You can click the banner at any time to extend your session. If you don’t
click the banner, the session will expire and you will need to
reauthenticate in a browser tab to access the agent.
You click away from the Prisma Access Agent app during the 5-minute
countdown to expiration.
The Prisma Access Agent app will close automatically and a browser tab
will appear for you to reauthenticate.
Your device is in sleep mode.
The system does not show any expiration notification. You will need to open
the Prisma Access Agent and reauthenticate when the browser comes
up.